{"metadata": {"vulnerability": "cve-2026-55792", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-06-17T14:40:28.380Z", "date_only": false, "value": "2026-06-17T14:40:28.380Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-55792", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-01T23:20:28.993Z", "date_only": false, "value": "2026-07-01T23:20:28.993Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-55792", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T23:20:28.993Z", "date_only": false, "value": "2026-07-01T23:20:28.993Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2026-55792", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-02T00:16:44Z", "date_only": false, "value": "2026-07-02T00:16:44Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-287W-MXQ6-X2CP", "record": "GHSA-287W-MXQ6-X2CP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-02T00:16:44.940Z", "date_only": false, "value": "2026-07-02T00:16:44.940", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55792", "record": "FKIE_CVE-2026-55792", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-02T00:31:18.979Z", "date_only": false, "value": "2026-07-02T00:31:18.979700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmrqnddb72m", "record": "CVE-2026-55792", "field": "creation_timestamp", "uuid": "db6568a2-beaa-4214-a73b-e9311e43fc65", "content": "CVE-2026-55792 - Craft CMS: Sensitive File Disclosure / Server-Side File Read\nCVE ID : CVE-2026-55792\n \n Published : July 1, 2026, 11:20 p.m. | 26\u00a0minutes ago\n \n Description : Craft CMS is a content management system (CMS). In versions starting from 4.0.0-RC1 and prior to 4.18...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpmrqnddb72m"}, {"timestamp": "2026-07-02T14:48:43.714Z", "date_only": false, "value": "2026-07-02T14:48:43.714822Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-55792", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-02T14:48:43.714Z", "date_only": false, "value": "2026-07-02T14:48:43.714822Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55792", "record": "FKIE_CVE-2026-55792", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-02T14:49:11.273Z", "date_only": false, "value": "2026-07-02T14:49:11.273Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-55792", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-02T14:49:11.273Z", "date_only": false, "value": "2026-07-02T14:49:11.273Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-55792", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-02T16:33:25.615Z", "date_only": false, "value": "2026-07-02T16:33:25.615938Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohizofjh2u", "record": "CVE-2026-55792", "field": "creation_timestamp", "uuid": "fc9ba849-3645-4ad7-b085-02e691cae621", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-55792 \u0432 Craft CMS: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/16998440-7542-46D6-8484-7484AF6ABA1E", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohizofjh2u"}, {"timestamp": "2026-07-06T21:29:49Z", "date_only": false, "value": "2026-07-06T21:29:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-287W-MXQ6-X2CP", "record": "GHSA-287W-MXQ6-X2CP", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-06T21:29:49Z", "date_only": false, "value": "2026-07-06T21:29:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-287W-MXQ6-X2CP", "record": "GHSA-287W-MXQ6-X2CP", "field": "modified"}, {"timestamp": "2026-07-06T21:42:10.955Z", "date_only": false, "value": "2026-07-06T21:42:10.955204Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e", "record": "CVE-2026-55792", "field": "creation_timestamp", "uuid": "c1ccb68b-bd66-4a49-9ea4-24d867ca2039", "content": "# CVE-2026-55792: CVE-2026-55792: Sensitive File Disclosure in Craft CMS via Twig Sandbox Bypass\n\n> **CVSS Score:** 6.0\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55792\n\n## Summary\nCVE-2026-55792 represents a sensitive file disclosure vulnerability in Craft CMS. The issue arises from the inclusion of the `dataUrl()` function in the Twig sandbox allowlist combined with incomplete path validation inside the underlying helper method. Attackers with low-privileged control panel access can exploit this flaw to read and exfiltrate the `.env` configuration file.\n\n## TL;DR\nLow-privileged users with template customizer access can read sensitive local files like `.env` using a sandbox bypass, leading to full database credential and security key compromise.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200\n- **Attack Vector**: Network\n- **CVSS 4.0 Score**: 6.0\n- **EPSS Score**: 0.00268\n- **Impact**: Sensitive Information Disclosure / Local File Read\n- **Exploit Status**: PoC in technical advisories\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Craft CMS 4.x\n- Craft CMS 5.x\n- **Craft CMS**: >= 4.0.0-RC1, < 4.18.0 (Fixed in: `4.18.0`)\n- **Craft CMS**: >= 5.0.0-RC1, < 5.10.0 (Fixed in: `5.10.0`)\n\n## Mitigation\n\n- Upgrade Craft CMS to versions 4.18.0, 5.10.0, or newer.\n- Revoke the 'utility:system-messages' permission from non-administrative users.\n- Manually modify twig-sandbox.php config to strip the dataUrl function.\n\n**Remediation Steps:**\n1. Run 'composer update craftcms/cms' to pull the latest security release.\n2. Verify the installation of version 4.18.0+ or 5.10.0+.\n3. Inspect the database table 'systemmessages' for any unauthorized template injections containing 'dataUrl'.\n\n## References\n\n- [GitHub Security Advisory GHSA-287w-mxq6-x2cp](https://github.com/craftcms/cms/security/advisories/GHSA-287w-mxq6-x2cp)\n- [Craft CMS Pull Request 18559](https://github.com/craftcms/cms/pull/18559)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55792) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/42394c2aa3975303824ce1e33bac787e"}, {"timestamp": "2026-10-25T21:10:00.770Z", "date_only": false, "value": "2026-10-25T21:10:00.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-55792", "record": "FKIE_CVE-2026-55792", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T15:37:08.448Z", "anchors": {"origin": {"timestamp": "2026-07-01T23:20:28.993Z", "date_only": false, "value": "2026-07-01T23:20:28.993Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-55792", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-01T23:20:28.993Z", "date_only": false, "value": "2026-07-01T23:20:28.993Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-55792", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 10340199.455794, "hours": 2872.2776266094443, "days": 119.67823444206017, "min_seconds": 10340199.455794, "max_seconds": 10340199.455794, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-01T23:20:28.993Z", "date_only": false, "value": "2026-07-01T23:20:28.993Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-55792", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T15:37:08.448Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}